Hacking Delete A9LH without NAND dump?

[astronautlevel]

As far as I know, they're only encrypted with console-specific xorpads, but the decrypted contents should be the same across 3DS models (e.g. 2DS should match o3DS, and all N3DSes should match each other, but not necessarily o3DS).

Oh, okay. So would you need to encrypt them with the xorpads before restoring them then?

 

[vexhash]

I've deleted emunand partition recently. So, if i don't have dumps of "old" nands (without a9lh) and i don't have emunand - it's completely hopeless?
Will i ever be able to delete a9lh? Not because it's bothering me, but because i may resell my 3ds someday to someone who only use legal stuff.

 

[daxtsu]

Oh, okay. So would you need to encrypt them with the xorpads before restoring them then?

As far as I understand, yes.

 

[Plailect]

On Old 3DS you could remove it just by flashing the firm partitions. ON NEW 3DS THIS WOULD RESULT IN A BRICK due to the secret sector not decrypting FIRM properly. You'd somehow have to inject the default secret sector, encrypted for your specific console, into NAND then overwrite firm (all in one go by modifying a NAND backup then restoring or you'd brick)

 

[Arkansaw]

On Old 3DS you could remove it just by flashing the firm partitions. ON NEW 3DS THIS WOULD RESULT IN A BRICK due to the secret sector not decrypting FIRM properly. You'd somehow have to inject the default secret sector, encrypted for your specific console, into NAND then overwrite firm (all in one go by modifying a NAND backup then restoring or you'd brick)

so writing downgraded emunand into sysnand will not work for n3ds?

 

[CrispyYoshi]

so writing downgraded emunand into sysnand will not work for n3ds?

First of all, why the sudden bump for a topic months old? This information is outdated.

You can perform a CTRTransfer on N3DS, but you need to unbrick the 2.1 Emunand before flashing it to sysnand... of course, not only does OTP Installer do this for you automatically now, but nowadays N3DS doesn't even need to downgrade to install A9LH: You can install A9LH using the "OTPless" method, which is covered in Plailect's guide.

 

[Arkansaw]

First of all, why the sudden bump for a topic months old? This information is outdated.

You can perform a CTRTransfer on N3DS, but you need to unbrick the 2.1 Emunand before flashing it to sysnand... of course, not only does OTP Installer do this for you automatically now, but nowadays N3DS doesn't even need to downgrade to install A9LH: You can install A9LH using the "OTPless" method, which is covered in Plailect's guide.

not sure what is your point here. this thread is about the removal of a9lh, I just want to confirm that downgraded emunand can be restored to sysnand

 

[OrGoN3]

Removing A9LH. Can't OP just use a version of Luma3DS prior to the recovery mode protection, boot into recovery mode, and then update?

 

[driverdis]

Removing A9LH. Can't OP just use a version of Luma3DS prior to the recovery mode protection, boot into recovery mode, and then update?

Yep, on O3DS, it may brick but there is a chance it will work.
On N3DS, it will brick. (I think even entering recovery mode on older AuReiNAND builds will brick it)

 

[SomeGamer]

Isn't there an option in SafeA9LHinstaller which does just that?

 

[CrispyYoshi]

not sure what is your point here. this thread is about the removal of a9lh, I just want to confirm that downgraded emunand can be restored to sysnand

Oh yes, that would work, assuming EmuNand doesn't have any hacks applied to it that would brick your 3DS (so make sure it's clean before doing that!)

In any case, SomeGamer is right: There is, in fact, an option within SafeA9LHInstaller that lets you uninstall A9LH from the firm partitions.

 

[Plailect]

Isn't there an option in SafeA9LHinstaller which does just that?

Yes.